nextrmnl ghcr.io/derkezorm/nextrmnl https://github.com/DerKezorm/nextrmnl/pkgs/container/nextrmnl bridge sh false https://github.com/DerKezorm/nextrmnl/issues https://github.com/DerKezorm/nextrmnl https://github.com/DerKezorm/nextrmnl#readme latest Latest stable release. https://nextrmnl.nexapps.dev nextrmnl is SSH and SFTP in the browser for the machines in your own network: a terminal (xterm.js) with tabs, jump hosts and copy and paste the way PuTTY does it, plus file transfer next to it. Accounts with a vault each for keys and passwords, sealed with the account's password so that not even the operator can read it. Host keys are checked and remembered, unknown hosts are shown with their fingerprint first. Connections can be shared between accounts without sharing access, sign-in works with a password, an optional second factor from an authenticator app, or OpenID Connect (one-button setup for authentik). By default nextrmnl only connects into private networks. Backups as encrypted ZIP files, a log that never contains terminal content or credentials. The interface is available in English and German. Tools:Utilities Network:Management http://[IP]:[PORT:8000]/ https://raw.githubusercontent.com/DerKezorm/unraid-templates/main/templates/nextrmnl.xml https://raw.githubusercontent.com/DerKezorm/unraid-templates/main/icons/nextrmnl.png 2026-09-26 nextrmnl is SSH and SFTP in the browser: a terminal with tabs and jump hosts, file transfer next to it, copy and paste like PuTTY, a vault per account for keys and passwords, host keys that are checked and remembered, accounts by invitation or OpenID Connect, an optional second factor, encrypted backups and a log without terminal content or credentials. Open the WebUI and create the operator account. Its password (at least 12 characters) also seals the vault: keys and passwords in it are readable with that password only, not by the operator and not from a backup. Put nextrmnl behind a reverse proxy with TLS before you use it from anywhere but your own desk; it holds the access to your machines, and pasting with a right click needs HTTPS anyway. By default nextrmnl only connects into private networks (10.x, 172.16 to 172.31, 192.168.x, 100.64.x, loopback). The operator can add networks and names or open it up in the settings. All data lives under /data: the SQLite database, secret.key, backups and logs. Keep it on a local disk, never on an SMB or NFS share, because SQLite locking is not reliable over network filesystems. Set PUID and PGID to the user that should own the files. 99 and 100 are the Unraid defaults and work out of the box. bridge [PORT:8460] 8000 tcp /mnt/user/appdata/nextrmnl /data rw 99PUID 100PGID TZ NEXTRMNL_PUBLIC_URL NEXTRMNL_PORT NEXTRMNL_SECRET_KEY autoNEXTRMNL_COOKIE_SECURE 8460 /mnt/user/appdata/nextrmnl 99 100 auto